πŸ”’ Guided

Pre-launch preview. Authorised access only.

Incorrect code

Guided by A Guide to Cloud
Explore AB-900 AI-901
Guided AZ-140 Domain 1
Domain 1 β€” Module 10 of 12 83%
10 of 28 overall

AZ-140 Study Guide

Domain 1: Plan and Implement an AVD Infrastructure

  • AVD Architecture: The Big Picture Free
  • Network Capacity and Design Free
  • RDP Shortpath, Multipath and QoS Free
  • Private Link and Network Troubleshooting Free
  • Storage Planning for User Data Free
  • File Shares and Azure NetApp Files Free
  • Host Pool Architecture: Personal vs Pooled Free
  • Sizing for Performance and Capacity Free
  • Creating Host Pools and Session Hosts Free
  • Session Host Licensing Free
  • Building Session Host Images Free
  • Image Lifecycle and Compute Gallery Free

Domain 2: Plan and Implement Identity and Security

  • Identity Scenarios for AVD
  • RBAC, Conditional Access and SSO
  • Defending AVD with Microsoft Defender
  • Network Security: NSGs, Firewall, Bastion
  • Threat Protection and Confidential VMs

Domain 3: Plan and Implement User Environments and Apps

  • FSLogix Profile Containers and ODFC
  • FSLogix Cloud Cache and Application Masking
  • AVD Clients: Choose and Deploy
  • User Experience and Session Settings
  • Application Groups and RemoteApp
  • Microsoft 365, Teams and OneDrive on AVD
  • App Attach: Dynamic Application Delivery

Domain 4: Monitor and Maintain an AVD Infrastructure

  • Monitoring AVD with Azure Monitor
  • Autoscaling and Session Management
  • Update Strategy and Backups
  • Disaster Recovery and Multi-Region

AZ-140 Study Guide

Domain 1: Plan and Implement an AVD Infrastructure

  • AVD Architecture: The Big Picture Free
  • Network Capacity and Design Free
  • RDP Shortpath, Multipath and QoS Free
  • Private Link and Network Troubleshooting Free
  • Storage Planning for User Data Free
  • File Shares and Azure NetApp Files Free
  • Host Pool Architecture: Personal vs Pooled Free
  • Sizing for Performance and Capacity Free
  • Creating Host Pools and Session Hosts Free
  • Session Host Licensing Free
  • Building Session Host Images Free
  • Image Lifecycle and Compute Gallery Free

Domain 2: Plan and Implement Identity and Security

  • Identity Scenarios for AVD
  • RBAC, Conditional Access and SSO
  • Defending AVD with Microsoft Defender
  • Network Security: NSGs, Firewall, Bastion
  • Threat Protection and Confidential VMs

Domain 3: Plan and Implement User Environments and Apps

  • FSLogix Profile Containers and ODFC
  • FSLogix Cloud Cache and Application Masking
  • AVD Clients: Choose and Deploy
  • User Experience and Session Settings
  • Application Groups and RemoteApp
  • Microsoft 365, Teams and OneDrive on AVD
  • App Attach: Dynamic Application Delivery

Domain 4: Monitor and Maintain an AVD Infrastructure

  • Monitoring AVD with Azure Monitor
  • Autoscaling and Session Management
  • Update Strategy and Backups
  • Disaster Recovery and Multi-Region
Domain 1: Plan and Implement an AVD Infrastructure Free ⏱ ~12 min read

Session Host Licensing

Understand AVD licensing requirements for Windows client and Windows Server session hosts, eligible licenses, Azure Hybrid Benefit, and per-user access pricing for external users.

AVD licensing β€” what you actually pay for

β˜• Simple explanation

Think of AVD like renting a furnished apartment.

The apartment itself (the VM) has a monthly rent β€” that is your Azure compute cost. But you also need a β€œright to live there” permit β€” that is the Windows license. Microsoft does not charge a separate fee for the AVD service itself. You just pay for the apartment (VM, storage, networking) and the permit (Windows license).

If your users are employees, the permit usually comes bundled with their Microsoft 365 subscription. If your users are external (contractors, customers), you pay a small per-user fee to Microsoft instead.

Azure Virtual Desktop has no separate service fee. You pay for the underlying Azure infrastructure (VMs, storage, networking, monitoring) and you must hold an eligible license for each user who accesses AVD.

The license you need depends on two things: (1) the operating system on your session hosts β€” Windows client or Windows Server, and (2) whether users are internal (your employees) or external (partners, customers). Internal users are covered by Microsoft 365 or Windows per-user licenses. External users use per-user access pricing, billed through your Azure subscription.

Windows client OS licensing

When your session hosts run Windows 11 Enterprise multi-session or Windows 11 Enterprise (for personal desktops), users need one of these eligible licenses:

Eligible LicenseIncludes AVD RightsNotes
Microsoft 365 E3 / E5YesMost common for enterprise
Microsoft 365 A3 / A5YesEducation SKUs
Microsoft 365 F3YesFrontline workers
Microsoft 365 Business PremiumYesSmall/medium business (up to 300 users)
Windows 11 Enterprise E3 / E5YesStandalone Windows license (per-user)
Windows VDA per-userYesFor devices not covered by other licenses

Key point: The user must have the license assigned β€” not the device, not the VM. AVD licensing is always per-user for Windows client operating systems.

🌐 Priya’s situation: β€œAt NomadTech, all 200 staff have Microsoft 365 E3. That covers AVD access for Windows 11 multi-session β€” no extra license purchase needed. I just needed to budget for the Azure VM and storage costs.”

Windows Server licensing

If your session hosts run Windows Server (2019 or 2022) instead of Windows 11, the licensing model changes:

  • RDS CALs (Remote Desktop Services Client Access Licenses) β€” per-user or per-device
  • Windows Server license with active Software Assurance (SA)

You might use Windows Server session hosts when you need specific server applications, legacy compatibility, or when your users do not have eligible Microsoft 365 licenses.

Windows Client vs Windows Server Licensing
AspectWindows Client (11 multi-session)Windows Server (2019/2022)
Eligible licensesM365 E3/E5/A3/A5/F3, Windows E3/E5, VDA per-userRDS CAL (per-user or per-device) + Server license with SA
Multi-sessionYes β€” built into Windows 11 Enterprise multi-sessionYes β€” native RDS capability
User experienceFull Windows 11 desktop experienceWindows Server desktop (no Store apps, different UX)
Common scenarioMost AVD deployments β€” modern desktop feelLegacy apps, server-specific workloads, no M365 licenses
License typePer-user onlyPer-user or per-device CALs
Cost modelUsually included in existing M365Separate CAL + SA purchase
ℹ️ When to use Windows Server session hosts

Most AVD deployments use Windows 11 Enterprise multi-session because it offers a familiar desktop experience and licensing is included with Microsoft 365. Use Windows Server when:

  • Your application requires Windows Server (e.g. legacy LOB apps that only run on Server)
  • Your users do not have Microsoft 365 or Windows Enterprise licenses and purchasing RDS CALs is cheaper
  • You need specific server roles installed on the session host

The exam may present scenarios where you need to identify whether Windows Server or Windows Client is the right choice based on licensing and application requirements.

Azure Hybrid Benefit

Azure Hybrid Benefit (AHB) lets you use your existing on-premises Windows Server licenses with Software Assurance to reduce the cost of Azure VMs. For AVD, this means:

  • Windows Server session hosts: Apply AHB to eliminate the Windows Server license cost on the VM β€” you only pay the base compute rate.
  • Windows client session hosts: If you have qualifying Windows licenses, multi-session VMs are already covered by your per-user license. AHB primarily helps with Windows Server VMs.

You enable AHB when creating VMs by setting the license type to Windows_Server or Windows_Client in ARM templates, or selecting it in the portal.

🏒 Raj at TerraStack: β€œWe had hundreds of Windows Server licenses with SA from our Citrix environment. Azure Hybrid Benefit let us reuse those licenses on AVD Windows Server session hosts β€” saved about 40 percent on compute costs during migration.”

The β€œhidden” costs beyond licensing

AVD has no service fee, but the total cost includes more than just VMs and licenses:

Cost ComponentWhat It IsTips to Manage
Compute (VMs)Session host VMs running in AzureUse autoscaling to deallocate VMs outside business hours
StorageOS disks, FSLogix profile containers, data sharesUse Premium SSD for profiles, Standard SSD for less critical storage
NetworkingData egress from Azure, VPN/ExpressRouteOutbound data from Azure is metered β€” minimise unnecessary transfers
MonitoringAzure Monitor, Log AnalyticsBudget for monitoring early β€” AVD Insights needs a Log Analytics workspace
BackupVM backup, profile backupAzure Backup for VMs, file-level backup for profile shares
IdentityEntra Domain Services or AD DS on VMsEntra Domain Services has a monthly cost; AD DS on VMs means extra VM compute
πŸ’‘ Exam tip: Know the full cost picture

Exam questions about AVD cost optimisation go beyond just VM sizing. They test whether you understand storage choices (Premium vs Standard SSD), autoscaling to reduce running hours, Azure Hybrid Benefit, and Reserved Instances for predictable workloads. If a scenario asks β€œhow to reduce AVD costs,” think holistically β€” not just β€œsmaller VMs.”

External user access β€” per-user access pricing

What if your AVD users are not your employees? Contractors, partners, or customers who do not have your organisation’s Microsoft 365 licenses need a different approach.

Per-user access pricing is an Azure meter that charges a monthly fee per external user who connects to AVD. Here is how it works:

  1. You enrol your Azure subscription in per-user access pricing (free enrolment).
  2. External users authenticate via Microsoft Entra External ID (B2B or B2C).
  3. Microsoft tracks which external users connect each month.
  4. You are billed per unique external user β€” the fee covers their AVD access rights.

There is no need to buy Microsoft 365 licenses for external users. The per-user access fee is automatically added to your Azure bill.

πŸ›οΈ JC at the Federal Department: β€œWe have 50 external auditors who need access to our compliance applications three months a year. Per-user access pricing means we only pay for the months they actually connect β€” no annual license commitment.”

License compliance verification

To verify your AVD deployment is properly licensed:

  1. Check user license assignments in the Microsoft 365 admin centre or Entra ID β€” every internal user must have an eligible license.
  2. Verify Azure Hybrid Benefit is correctly applied to VMs β€” check the VM properties in the portal for the license type.
  3. Confirm per-user access pricing enrolment if you have external users β€” check under the subscription’s AVD per-user access pricing registration.
  4. Audit RDS CALs if using Windows Server session hosts β€” ensure you have enough CALs for your user or device count.

Exam concept: The exam expects you to recommend the correct licensing model for a given scenario. This means matching the OS (Windows client vs Server), user type (internal vs external), and existing licenses (M365, Windows Enterprise, RDS CAL + SA).

Question

Does AVD charge a separate service fee?

Click or press Enter to reveal answer

Answer

No. Azure Virtual Desktop has no separate service fee. You pay for the underlying Azure infrastructure (VMs, storage, networking) and you must hold eligible Windows licenses for each user. The AVD control plane (broker, gateway, diagnostics) is free.

Click to flip back

Question

Which Microsoft 365 licenses include AVD access rights for Windows client session hosts?

Click or press Enter to reveal answer

Answer

Microsoft 365 E3, E5, A3, A5, F3, and Business Premium. Also Windows 11 Enterprise E3/E5 and Windows VDA per-user as standalone options.

Click to flip back

Question

What is per-user access pricing in AVD?

Click or press Enter to reveal answer

Answer

A monthly Azure meter that charges per unique external user who connects to AVD. It covers AVD access rights for users who do not have your organisation's Microsoft 365 licenses β€” such as contractors, partners, or customers authenticating via Entra External ID.

Click to flip back

Question

What does Azure Hybrid Benefit do for AVD?

Click or press Enter to reveal answer

Answer

It lets you use existing on-premises Windows Server licenses with Software Assurance to reduce VM costs in Azure. For Windows Server session hosts, it eliminates the Windows Server license portion of the VM price β€” you pay only the base compute rate.

Click to flip back

Knowledge Check

Priya's 200 NomadTech staff all have Microsoft 365 E3. She wants to deploy Windows 11 Enterprise multi-session host pools. Does she need to purchase any additional Windows licenses?

Knowledge Check

JC needs to provide AVD access to 50 external government auditors for three months per year. They do not have Federal Department Microsoft 365 licenses. What is the most cost-effective licensing approach?

Knowledge Check

Raj is migrating TerraStack from Citrix to AVD. They have existing Windows Server licenses with Software Assurance. Which benefit should Raj apply to reduce Azure VM costs for Windows Server session hosts?

🎬 Video coming soon

Session Host Licensing


Next up: Building Session Host Images β€” learn how to create custom images with your apps pre-installed, understand Sysprep, and automate image creation with Azure VM Image Builder.

← Previous

Creating Host Pools and Session Hosts

Next β†’

Building Session Host Images

Guided

I learn, I simplify, I share.

A Guide to Cloud YouTube Feedback

© 2026 Sutheesh. All rights reserved.

Guided is an independent study resource and is not affiliated with, endorsed by, or officially connected to Microsoft. Microsoft, Azure, and related trademarks are property of Microsoft Corporation. Always verify information against Microsoft Learn.